$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/DweKxyYHGSnAf6c0G5u-ynLF3kk.roa File: DweKxyYHGSnAf6c0G5u-ynLF3kk.roa (raw, json) Hash identifier: Wn+lrIPFU2sPYoNmzh3RzAe6x7m2Dxs4pEeCwzfKN1I= Subject key identifier: 0F:07:8A:C7:26:07:19:29:C0:7F:A7:34:1B:9B:BE:CA:72:C5:DE:49 Certificate issuer: /CN=7C01445105DBAF2750BA19245C7064AD40F7226D Certificate serial: 51 Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/DweKxyYHGSnAf6c0G5u-ynLF3kk.roa Signing time: Fri 31 Jan 2025 01:31:50 +0000 ROA not before: Fri 31 Jan 2025 01:31:50 +0000 ROA not after: Thu 15 Jan 2026 01:30:03 +0000 asID: 2907 IP address blocks: 202.253.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D Validity Not Before: Jan 31 01:31:50 2025 GMT Not After : Jan 15 01:30:03 2026 GMT Subject: CN=0F078AC726071929C07FA7341B9BBECA72C5DE49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:ce:c9:fd:4a:65:d8:e6:60:e4:32:e7:14: 36:3e:b2:84:cf:6d:33:9e:52:c8:09:bd:34:34:26: a0:26:59:1b:86:11:ae:cf:9d:fe:55:7d:15:f3:4d: e7:9a:75:aa:39:c8:52:e3:63:42:fe:e2:f0:f9:7f: a9:44:71:63:e1:29:d6:c1:c7:b2:fc:5a:37:8e:f1: a8:00:aa:b7:aa:07:b9:5e:14:fa:7c:18:cd:0a:97: ba:17:f1:9a:75:08:c2:a6:8c:ca:ec:41:41:cf:86: b4:67:ee:f3:2c:5c:2e:01:20:ec:c9:8e:8a:be:ad: 7e:de:1b:dd:dd:ed:e7:ea:0d:cc:83:24:be:bf:05: f6:27:96:e3:f7:16:4f:91:88:9e:78:a2:b7:70:a3: 69:c7:cd:2b:d1:01:83:fd:13:26:c7:c8:63:77:d1: 91:80:d4:64:9a:b4:3e:bd:fc:fe:8a:55:77:37:95: 3e:a4:fa:4c:31:9a:a8:c2:77:9a:25:25:da:b2:e6: 91:99:07:4f:11:95:92:d2:19:98:82:d8:5e:5f:45: 3b:ab:81:d2:04:c9:75:23:8d:79:28:2e:6b:75:0b: f5:61:3d:a6:c0:5b:fd:bf:6f:09:c7:dd:fb:89:d9: 15:69:0e:a7:d4:8f:9a:b7:13:6f:08:88:53:7b:19: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:8A:C7:26:07:19:29:C0:7F:A7:34:1B:9B:BE:CA:72:C5:DE:49 X509v3 Authority Key Identifier: keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/DweKxyYHGSnAf6c0G5u-ynLF3kk.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.253.88.0/22 Signature Algorithm: sha256WithRSAEncryption 75:69:9a:be:d3:f5:cc:63:98:7b:25:e2:ec:59:b3:ba:05:c2: d1:3c:ed:91:b7:08:6d:53:60:2d:8a:40:42:a4:66:5b:8f:22: 4c:8c:0c:25:43:1e:b7:86:40:83:c6:91:cb:65:3f:08:82:9a: 1e:d3:13:cb:2d:12:45:df:76:7e:ed:1b:11:32:73:6e:1f:37: 3d:3f:a5:90:8d:5a:70:39:32:d6:9f:39:ba:76:60:d5:50:bc: 8e:89:be:f1:af:75:cb:ba:e3:a9:7d:c6:e2:6e:fe:2c:a4:a8: f9:ab:b9:ae:77:29:c4:88:8e:37:b3:9e:cf:1a:ff:72:94:ca: e8:ca:06:05:7a:4b:02:f6:84:f7:3a:38:e6:25:94:5b:8c:72: d0:83:f7:50:67:b7:30:16:5f:9b:43:fc:94:09:5d:ab:6c:c5: e1:ef:fc:9a:9b:92:81:15:9e:fb:3d:de:27:2e:7e:a8:4c:77: 0f:aa:37:f8:fb:d8:f0:84:2e:1b:3c:6c:2a:e8:bc:ea:9d:c1: 2a:3a:d5:8e:a3:51:4d:e4:b8:ba:a7:34:97:f0:f1:ef:31:30: 4e:47:dd:ac:6b:84:e7:33:06:ca:8d:df:11:9b:d4:53:d6:b2: 67:ab:38:51:82:e9:56:31:6d:db:06:13:52:8b:16:6d:6d:04: 33:7c:a0:98 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzAx NDQ1MTA1REJBRjI3NTBCQTE5MjQ1QzcwNjRBRDQwRjcyMjZEMB4XDTI1MDEzMTAx MzE1MFoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoMEYwNzhBQzcyNjA3MTky OUMwN0ZBNzM0MUI5QkJFQ0E3MkM1REU0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMfAzsn9SmXY5mDkMucUNj6yhM9tM55SyAm9NDQmoCZZG4YRrs+d /lV9FfNN55p1qjnIUuNjQv7i8Pl/qURxY+Ep1sHHsvxaN47xqACqt6oHuV4U+nwY zQqXuhfxmnUIwqaMyuxBQc+GtGfu8yxcLgEg7MmOir6tft4b3d3t5+oNzIMkvr8F 9ieW4/cWT5GInniit3CjacfNK9EBg/0TJsfIY3fRkYDUZJq0Pr38/opVdzeVPqT6 TDGaqMJ3miUl2rLmkZkHTxGVktIZmILYXl9FO6uB0gTJdSONeSgua3UL9WE9psBb /b9vCcfd+4nZFWkOp9SPmrcTbwiIU3sZ7wUCAwEAAaOCAiYwggIiMB0GA1UdDgQW BBQPB4rHJgcZKcB/pzQbm77KcsXeSTAfBgNVHSMEGDAWgBR8AURRBduvJ1C6GSRc cGStQPcibTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI4NS9mQUZFVVFYYnJ5ZFF1aGtrWEhCa3JVRDNJbTAuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mQUZFVVFYYnJ5ZFF1aGtrWEhCa3JV RDNJbTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI4NS9Ed2VLeHlZSEdTbkFmNmMwRzV1LXluTEYza2sucm9h MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCyv1YMA0GCSqGSIb3DQEBCwUAA4IBAQB1aZq+0/XMY5h7JeLsWbO6BcLR PO2RtwhtU2AtikBCpGZbjyJMjAwlQx63hkCDxpHLZT8Igpoe0xPLLRJF33Z+7RsR MnNuHzc9P6WQjVpwOTLWnzm6dmDVULyOib7xr3XLuuOpfcbibv4spKj5q7mudynE iI43s57PGv9ylMroygYFeksC9oT3OjjmJZRbjHLQg/dQZ7cwFl+bQ/yUCV2rbMXh 7/yam5KBFZ77Pd4nLn6oTHcPqjf4+9jwhC4bPGwq6LzqncEqOtWOo1FN5Li6pzSX 8PHvMTBOR92sa4TnMwbKjd8Rm9RT1rJnqzhRgulWMW3bBhNSixZtbQQzfKCY -----END CERTIFICATE-----Generated at Sat Apr 5 17:35:23 2025 by rpki-client